jinzd-ai-cli 0.4.286 → 0.4.288

package/dist/{batch-GY3I53DE.js → batch-YAEXKK2C.js}

@@ -4,12 +4,12 @@ import {
 } from "./chunk-RS7SKYTS.js";
 import {
   ConfigManager
-} from "./chunk-7G7RZHJI.js";
+} from "./chunk-7RC7AN6V.js";
 import "./chunk-TU3L3PW7.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
-import "./chunk-THUXZNJL.js";
+import "./chunk-O4CZPTPU.js";
 
 // src/cli/batch.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-BRLLV3FX.js → chunk-37WBQV3E.js}

@@ -11,7 +11,7 @@ import {
   searchPersistentMemories,
   touchMemoryReferences,
   updateMemoryEntry
-} from "./chunk-UKITSNSH.js";
+} from "./chunk-JBNNJ32H.js";
 import {
   indexProject
 } from "./chunk-4DEMGCK4.js";
@@ -30,7 +30,7 @@ import {
   runHook,
   runLifecycleHooks,
   runTool
-} from "./chunk-EYUCJBGS.js";
+} from "./chunk-5G6HX57U.js";
 import {
   buildTruncatedArgumentsError,
   getDangerLevel,
@@ -50,14 +50,14 @@ import {
 } from "./chunk-4BKXL7SM.js";
 import {
   runTestsTool
-} from "./chunk-S7ABWTDV.js";
+} from "./chunk-6NEEFOVF.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/tools/shell-pool.ts
 import { spawn as spawn2 } from "child_process";
@@ -1628,6 +1628,63 @@ function simpleDiff(oldLines, newLines) {
   return result;
 }
 
+// src/core/tool-gate.ts
+var gateMessages = {
+  hookDenied: (toolName, reason) => `[Hook denied] ${reason ?? `PreToolUse blocked ${toolName}`}. Do not retry without asking.`,
+  networkDenied: (toolName, reason) => `[Permission denied] Tool ${toolName} is blocked by networkPolicy${reason ? ` (${reason})` : ""}. Do not retry.`,
+  profileDenied: (toolName, profileName, reason) => `[Permission denied] Tool ${toolName} is blocked by permission profile "${profileName}"${reason ? ` (${reason})` : ""}. Do not retry.`,
+  autoDenied: (reason) => `[Auto denied] ${reason}. Do not retry without asking.`,
+  permissionCancelled: (toolName) => `[User cancelled] The user declined permission for ${toolName}. Do not retry without asking.`,
+  operationCancelled: (toolName, level) => `[User cancelled] The user declined the ${level === "destructive" ? "destructive " : ""}${toolName} operation. Do not retry without asking.`
+};
+function needsPermissionRequestHook(input) {
+  return input.networkPermission?.action === "confirm" || input.permission.action === "confirm";
+}
+function decideToolGate(call, input) {
+  const { dangerLevel, permission, networkPermission } = input;
+  if (input.hookDeny) {
+    return { kind: "denied", source: "hook", message: gateMessages.hookDenied(call.name, input.hookDeny.reason) };
+  }
+  if (networkPermission?.action === "deny") {
+    return { kind: "denied", source: "network", message: gateMessages.networkDenied(call.name, networkPermission.reason) };
+  }
+  if (permission.action === "deny") {
+    return {
+      kind: "denied",
+      source: "profile",
+      message: gateMessages.profileDenied(call.name, permission.profileName ?? "default", permission.reason)
+    };
+  }
+  if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+    return { kind: "allow", source: "profile" };
+  }
+  const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
+  if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
+    return { kind: "confirm", level: "write", source: "permission" };
+  }
+  if (input.sessionAutoMode && networkPermission?.action !== "confirm") {
+    const classification = input.classify();
+    if (classification.decision === "deny") {
+      return {
+        kind: "denied",
+        source: "auto-mode",
+        message: gateMessages.autoDenied(classification.reason),
+        classification
+      };
+    }
+    if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
+      return { kind: "allow", source: "auto-mode" };
+    }
+  }
+  if (input.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
+    return { kind: "allow", source: "yolo" };
+  }
+  if (dangerLevel === "write" || dangerLevel === "destructive") {
+    return { kind: "confirm", level: dangerLevel, source: "danger" };
+  }
+  return { kind: "allow", source: "safe" };
+}
+
 // src/tools/permissions.ts
 import { existsSync as existsSync4, realpathSync } from "fs";
 import { basename as basename2, dirname as dirname2, isAbsolute, resolve as resolve3 } from "path";
@@ -2290,13 +2347,6 @@ var ToolExecutor = class {
       { configDir: this.hookConfigDir, onSummary: (msg) => console.log(theme.dim(`  [hook] ${msg}`)) }
     );
     const preDeny = preToolDecisions.find((d) => d.action === "deny");
-    if (preDeny) {
-      return {
-        callId: call.id,
-        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
-        isError: true
-      };
-    }
     for (const d of preToolDecisions) {
       const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
       for (const w of warnings) console.log(theme.warning(`  \u26A0 Hook warning: ${w}`));
@@ -2316,7 +2366,19 @@ var ToolExecutor = class {
       }
     );
     const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
-    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+    const gate = decideToolGate(call, {
+      dangerLevel,
+      permission,
+      networkPermission,
+      hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      sessionAutoMode: this.sessionAutoMode,
+      sessionAutoApprove: this.sessionAutoApprove,
+      classify: () => defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      })
+    });
+    if (needsPermissionRequestHook({ permission, networkPermission })) {
       runLifecycleHooks(
         this.hookConfig,
         "PermissionRequest",
@@ -2324,131 +2386,29 @@ var ToolExecutor = class {
         { configDir: this.hookConfigDir, onSummary: (msg) => console.log(theme.dim("  [hook] " + msg)) }
       );
     }
-    if (networkPermission?.action === "deny") {
-      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "deny") {
-      const reason = permission.reason ? ` (${permission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
-      if (!toolCallAlreadyPrinted) this.printToolCall(call);
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        const wasTruncated = content !== rawContent;
-        this.printToolResult(call.name, rawContent, false, wasTruncated);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.printToolResult(call.name, message, true, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
-    if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
-      this.printToolCall(call);
-      toolCallAlreadyPrinted = true;
-      const confirmed = await this.confirm(call, "write");
-      if (!confirmed) {
-        return {
-          callId: call.id,
-          content: `[User cancelled] The user declined permission for ${call.name}. Do not retry without asking.`,
-          isError: true
-        };
-      }
+    if (gate.kind === "denied") {
+      if (gate.source === "auto-mode") recordRecentlyDeniedAutoAction(call, gate.classification);
+      return { callId: call.id, content: gate.message, isError: true };
     }
-    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
-      const classification = defaultActionClassifier.classify(call, dangerLevel, {
-        workspaceRoot: this.workspaceRoot,
-        tempDirs: [tmpdir()]
-      });
-      if (classification.decision === "deny") {
-        recordRecentlyDeniedAutoAction(call, classification);
-        return {
-          callId: call.id,
-          content: `[Auto denied] ${classification.reason}. Do not retry without asking.`,
-          isError: true
-        };
-      }
-      if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
+    if (gate.kind === "confirm") {
+      if (gate.source === "danger" && gate.level === "write") {
         this.printToolCall(call);
-        if (dangerLevel === "write") this.printDiffPreview(call);
-        console.log(theme.warning(`  \u26A1 Auto-approved (/auto: ${classification.ruleId})`));
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          const wasTruncated = content !== rawContent;
-          this.printToolResult(call.name, rawContent, false, wasTruncated);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-          this.printToolResult(call.name, message, true, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content: message, isError: true };
-        }
-      }
-    }
-    if (this.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
-      this.printToolCall(call);
-      if (dangerLevel === "write") this.printDiffPreview(call);
-      console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        const wasTruncated = content !== rawContent;
-        this.printToolResult(call.name, rawContent, false, wasTruncated);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.printToolResult(call.name, message, true, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    if (dangerLevel === "write") {
-      this.printToolCall(call);
-      this.printDiffPreview(call);
-      const confirmed = await this.confirm(call, dangerLevel);
-      if (!confirmed) {
-        return {
-          callId: call.id,
-          content: `[User cancelled] The user declined the ${call.name} operation. Do not retry without asking.`,
-          isError: true
-        };
+        this.printDiffPreview(call);
+        toolCallAlreadyPrinted = true;
+      } else if (gate.source === "permission") {
+        this.printToolCall(call);
+        toolCallAlreadyPrinted = true;
       }
-    } else if (dangerLevel === "destructive") {
-      const confirmed = await this.confirm(call, dangerLevel);
+      const confirmed = await this.confirm(call, gate.level);
       if (!confirmed) {
         return {
           callId: call.id,
-          content: `[User cancelled] The user declined the destructive ${call.name} operation. Do not retry without asking.`,
+          content: gate.source === "permission" ? gateMessages.permissionCancelled(call.name) : gateMessages.operationCancelled(call.name, gate.level),
           isError: true
         };
       }
-      this.printToolCall(call);
-    } else {
-      this.printToolCall(call);
     }
+    if (!toolCallAlreadyPrinted) this.printToolCall(call);
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
       const content = truncateOutput(rawContent, call.name);
@@ -6997,6 +6957,9 @@ export {
   groupCallsByPhase,
   runSafePhases,
   resolveWriteFileArgs,
+  gateMessages,
+  needsPermissionRequestHook,
+  decideToolGate,
   checkPermissionWithProfile,
   formatPermissionProfileWarning,
   checkNetworkPolicy,

package/dist/{chunk-EYUCJBGS.js → chunk-5G6HX57U.js}

@@ -8,7 +8,7 @@ import {
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/diagnostics/tool-stats.ts
 import { mkdirSync } from "fs";

package/dist/{chunk-S7ABWTDV.js → chunk-6NEEFOVF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-7G7RZHJI.js → chunk-7RC7AN6V.js}

@@ -11,7 +11,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/config/config-manager.ts
 import { readFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-UGY5SVNX.js → chunk-ALSSNFNK.js}

@@ -53,9 +53,76 @@ var BaseProvider = class {
   }
 };
 
+// src/core/network-error.ts
+var NETWORK_CODES = /* @__PURE__ */ new Set([
+  "ECONNREFUSED",
+  // 端口没人听（代理没起来最常见）
+  "ECONNRESET",
+  // 对端断开
+  "ENOTFOUND",
+  // DNS 查不到
+  "EAI_AGAIN",
+  // DNS 临时失败
+  "ETIMEDOUT",
+  // 连接超时
+  "EHOSTUNREACH",
+  "ENETUNREACH",
+  "EPIPE",
+  "UND_ERR_SOCKET",
+  // undici：socket 意外关闭
+  "UND_ERR_CONNECT_TIMEOUT"
+]);
+var TRANSIENT_CODES = /* @__PURE__ */ new Set(["ECONNRESET", "UND_ERR_SOCKET", "EPIPE", "EAI_AGAIN"]);
+function findCause(err, depth = 0) {
+  if (!err || depth > 4) return null;
+  const e = err;
+  if (typeof e.code === "string") {
+    return {
+      code: e.code,
+      address: e.address ? `${e.address}${e.port !== void 0 ? `:${e.port}` : ""}` : void 0,
+      message: e.message
+    };
+  }
+  if (Array.isArray(e.errors) && e.errors.length > 0) {
+    for (const inner of e.errors) {
+      const found = findCause(inner, depth + 1);
+      if (found) return found;
+    }
+  }
+  return findCause(e.cause, depth + 1);
+}
+function describeNetworkFailure(err, ctx = {}) {
+  const cause = findCause(err);
+  const topMessage = err instanceof Error ? err.message : String(err);
+  const looksNetwork = cause?.code && NETWORK_CODES.has(cause.code) || topMessage === "fetch failed" || topMessage.includes("Connection error");
+  if (!looksNetwork) return null;
+  const code = cause?.code;
+  const address = cause?.address;
+  const transient = !!code && TRANSIENT_CODES.has(code);
+  const what = code ? `${code}${address ? ` ${address}` : ""}` : cause?.message ?? "no further detail from the network layer";
+  const where = ctx.target ? ` while connecting to ${ctx.target}` : "";
+  const parts = [`Connection failed${where} (${what}).`];
+  if (ctx.proxyUrl) {
+    parts.push(`The request went through the proxy from config.proxy (${ctx.proxyUrl}).`);
+    if (code === "ECONNREFUSED") {
+      parts.push(`That address refused the connection \u2014 the proxy is probably not running. Start it, or unset config.proxy to connect directly.`);
+    }
+  }
+  if (transient) {
+    parts.push(`This usually means an idle connection was dropped by the other side \u2014 just send the message again.`);
+  } else if (code === "ENOTFOUND" || code === "EAI_AGAIN") {
+    parts.push(`DNS lookup failed \u2014 check the network connection${ctx.proxyUrl ? " and the proxy" : ""}.`);
+  } else if (code === "ETIMEDOUT" || code === "UND_ERR_CONNECT_TIMEOUT") {
+    parts.push(`The connection timed out before it was established${ctx.proxyUrl ? " \u2014 check whether the proxy can reach this host" : ""}.`);
+  }
+  return { code, address, transient, message: parts.join(" ") };
+}
+
 // src/providers/claude.ts
 var CACHE_MIN_SYSTEM_CHARS = 2e3;
 var ClaudeProvider = class extends BaseProvider {
+  /** 生效的代理（网络失败时点名它，见 core/network-error.ts）。 */
+  activeProxyUrl;
   client;
   info = {
     id: "claude",
@@ -90,6 +157,7 @@ var ClaudeProvider = class extends BaseProvider {
       baseURL: options?.baseUrl
     };
     const proxyUrl = options?.proxy;
+    this.activeProxyUrl = proxyUrl;
     try {
       const { Agent, ProxyAgent, fetch: undiciFetch } = await import("undici");
       const STREAM_BODY_TIMEOUT = 30 * 60 * 1e3;
@@ -614,6 +682,8 @@ var ClaudeProvider = class extends BaseProvider {
     if (err instanceof Anthropic.RateLimitError) {
       return new RateLimitError("claude");
     }
+    const net = describeNetworkFailure(err, { target: "api.anthropic.com", proxyUrl: this.activeProxyUrl });
+    if (net) return new ProviderError("claude", net.message, err instanceof Error ? err : void 0);
     if (err instanceof Error) {
       return new ProviderError("claude", err.message, err);
     }
@@ -930,10 +1000,11 @@ var GeminiProvider = class extends BaseProvider {
           err
         );
       }
-      if (msg.includes("fetch failed") || msg.includes("ECONNREFUSED") || msg.includes("ETIMEDOUT") || msg.includes("ENOTFOUND") || msg.includes("socket hang up")) {
+      const net = describeNetworkFailure(err, { target: "generativelanguage.googleapis.com" });
+      if (net || msg.includes("socket hang up")) {
         return new ProviderError(
           "gemini",
-          `Network connection failed: ${msg}
+          `${net?.message ?? `Network connection failed: ${msg}`}
 Node.js does not automatically use system proxies. Try one of the following:
   1. Set environment variable: set HTTPS_PROXY=http://127.0.0.1:<proxy-port>
   2. Configure an accessible Gemini API mirror URL in config.json under customBaseUrls.gemini`,
@@ -1002,6 +1073,8 @@ function readRetryCount(headers) {
 }
 var OpenAICompatibleProvider = class extends BaseProvider {
   client;
+  /** 生效的代理（wrapError 要在网络失败时点名它）；未配代理时为 undefined。 */
+  activeProxyUrl;
   defaultTimeout = 6e4;
   // ms
   /**
@@ -1031,13 +1104,17 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       const { Agent, ProxyAgent, fetch: undiciFetch } = await import("undici");
       const STREAM_BODY_TIMEOUT = 30 * 60 * 1e3;
       const STREAM_HEADERS_TIMEOUT = 5 * 60 * 1e3;
+      const KEEP_ALIVE_TIMEOUT = 2e3;
+      this.activeProxyUrl = proxyUrl;
       const dispatcher = proxyUrl ? new ProxyAgent({
         uri: proxyUrl,
         bodyTimeout: STREAM_BODY_TIMEOUT,
-        headersTimeout: STREAM_HEADERS_TIMEOUT
+        headersTimeout: STREAM_HEADERS_TIMEOUT,
+        keepAliveTimeout: KEEP_ALIVE_TIMEOUT
       }) : new Agent({
         bodyTimeout: STREAM_BODY_TIMEOUT,
-        headersTimeout: STREAM_HEADERS_TIMEOUT
+        headersTimeout: STREAM_HEADERS_TIMEOUT,
+        keepAliveTimeout: KEEP_ALIVE_TIMEOUT
       });
       clientOptions.fetch = ((url, init) => {
         const retryCount = readRetryCount(init?.headers);
@@ -1511,11 +1588,24 @@ var OpenAICompatibleProvider = class extends BaseProvider {
     if (err instanceof OpenAI.RateLimitError) {
       return new RateLimitError(this.info.id);
     }
+    const net = describeNetworkFailure(err, {
+      target: this.hostLabel(),
+      proxyUrl: this.activeProxyUrl
+    });
+    if (net) return new ProviderError(this.info.id, net.message, err instanceof Error ? err : void 0);
     if (err instanceof Error) {
       return new ProviderError(this.info.id, err.message, err);
     }
     return new ProviderError(this.info.id, String(err));
   }
+  /** 请求实际打向的主机，用于「连谁失败了」。 */
+  hostLabel() {
+    try {
+      return new URL(this.info.baseUrl ?? this.defaultBaseUrl).host;
+    } catch {
+      return this.info.id;
+    }
+  }
 };
 
 // src/providers/deepseek.ts

package/dist/{chunk-6SCELZG6.js → chunk-C5UAM4X7.js}

@@ -8,13 +8,13 @@ import {
   listHooks,
   listInstalledPlugins,
   resetStats
-} from "./chunk-EYUCJBGS.js";
+} from "./chunk-5G6HX57U.js";
 import {
   ProviderRegistry
-} from "./chunk-UGY5SVNX.js";
+} from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7G7RZHJI.js";
+} from "./chunk-7RC7AN6V.js";
 import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
@@ -26,7 +26,7 @@ import {
   MCP_PROJECT_CONFIG_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/diagnostics/doctor-report.ts
 import { existsSync as existsSync3, statSync as statSync2 } from "fs";

package/dist/{chunk-L4FDTQ42.js → chunk-E66SCDTD.js}

@@ -1,6 +1,6 @@
 import {
   TEST_TIMEOUT
-} from "./chunk-GIJL4EFA.js";
+} from "./chunk-U4NQ2IRE.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-D7HYLMCC.js → chunk-EYA4IXQJ.js}

@@ -12,7 +12,7 @@ import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-GIJL4EFA.js";
+} from "./chunk-U4NQ2IRE.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-2YDLBM3Z.js → chunk-G5QZS5TN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-UKITSNSH.js → chunk-JBNNJ32H.js}

@@ -13,7 +13,7 @@ import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-53V3RQY5.js → chunk-NJDQCQ7P.js}

@@ -16,7 +16,7 @@ import {
   setPreferredAgentName,
   truncateForPersist,
   undoStack
-} from "./chunk-BRLLV3FX.js";
+} from "./chunk-37WBQV3E.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -51,7 +51,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-UKITSNSH.js";
+} from "./chunk-JBNNJ32H.js";
 import {
   theme
 } from "./chunk-5C76XDDF.js";
@@ -65,7 +65,7 @@ import {
 import {
   buildDoctorReport,
   formatDoctorReport
-} from "./chunk-6SCELZG6.js";
+} from "./chunk-C5UAM4X7.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -80,7 +80,7 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-EYUCJBGS.js";
+} from "./chunk-5G6HX57U.js";
 import {
   isCleanDocumentBody,
   stripOuterCodeFence
@@ -109,7 +109,7 @@ import {
   MCP_TOOL_PREFIX,
   REPO_URL,
   VERSION
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/mcp/client.ts
 import { spawn } from "child_process";
@@ -2393,7 +2393,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME } = await import("./constants-5FYUQLKN.js");
+          const { MCP_PROJECT_CONFIG_NAME } = await import("./constants-T2B3SBMR.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot(cwd) ?? cwd;
@@ -3497,7 +3497,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-KZ2IUZHK.js");
+          const { executeTests } = await import("./run-tests-GGNFI7CL.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{chunk-THUXZNJL.js → chunk-O4CZPTPU.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.286";
+var VERSION = "0.4.288";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-GIJL4EFA.js → chunk-U4NQ2IRE.js}

@@ -1,5 +1,5 @@
 // src/core/constants.ts
-var VERSION = "0.4.286";
+var VERSION = "0.4.288";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-3ZQZO5F7.js → chunk-WQ2YQ5YC.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-2YDLBM3Z.js";
+} from "./chunk-G5QZS5TN.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,13 +13,13 @@ import {
 } from "./chunk-6YZEZFX5.js";
 import {
   ProviderRegistry
-} from "./chunk-UGY5SVNX.js";
+} from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7G7RZHJI.js";
+} from "./chunk-7RC7AN6V.js";
 import {
   VERSION
-} from "./chunk-THUXZNJL.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";